Capabilities

Zero-access security intelligence. Everything LeakTrace reads about your firm.

LeakTrace is zero-access security intelligence. It reads an organization externally, the way an attacker's AI agent does, without access to any system: its email records, the look-alike addresses an attacker could register from its name, staff addresses in breach data and its website. Every finding carries its evidence and the exact fix.

Attackers run AI agents in swarms: many at once, each trying the combinations of these routes against any firm it can read. We read for the combinations first.

Every one of them is read externally. Nothing inside your firm is logged into, installed or touched.

Request your firm’s reading See a sample assessment

One assessmentRead-only

techniques

up to4,247

moves the assessment tries against your firm externally

routes to your money, your clients, your accounts and your name, checked end to end

Figures for one assessment. The middle figure counts the checks that have a cap; your own record prints its own count. The assessment is delivered within 72 hours of confirmation and LeakTrace Watch keeps reading after it.

Areas

What LeakTrace reads

Six areas, each with what you receive and what we never do.

Email sent in your name

1 hbetween reads on monitoring

LeakTrace reads the published records that decide whether a stranger can send email as your firm. It reads your mail servers too.

You receive: The exact record for your DNS host and mail provider, staged from your current policy. Where we reach your DNS host, you approve each step with one click.
We never: Send a forged message to prove the gap.

Look-alike domains

350names asked about on each assessment, at most

LeakTrace reads the addresses an attacker could register from your firm's name and whether each one is live, copies your site or is set up for email.

You receive: Each live name with its registrar, its mail set-up and its dates. With your permission, on monitoring or with the look-alike response, a person at LeakTrace sends the takedown request in your firm's name. The registrar decides.
We never: Promise a removal or contact whoever registered the name.

Staff addresses in breach data

Dailyre-read on monitoring

LeakTrace reads monitored breach databases for the addresses at your firm's own domain.

You receive: Each address with the source and date of its listing and what to change.
We never: Look up anybody's personal accounts.

Website and services

1 dayto match a flaw being exploited now to your site's software, on monitoring

LeakTrace reads what your website and the host names under your domain show to anyone: certificates, software and sign-in pages. The assessment adds the service ports open to the internet and keeps a redacted copy of any file that should not be public, once you authorise it.

You receive: Each finding with its record and the exact fix, re-checked until it is closed.
We never: Type, submit or change anything on your site.

What AI assistants answer about your firm

6assistants asked what they say about your firm, in each assessment

A client who asks an AI assistant about your firm trusts the answer it gives. Assistants build those answers from pages they crawl.

A look-alike address an attacker could register can be built to be crawled: its robots file invites the AI crawlers in and its page claims your name.

Attackers manipulate AI answers to send your paying and enquiring clients to their own look-alike page, web address, sign-in page, phone number or email.

The check is built to ask six assistants: Claude, ChatGPT search, Gemini, Perplexity, Grok and Copilot, through Bing.

You receive: Monitoring asks again every week and tells you when an impostor's phone or address is in an answer.
We never: Show a result before you order. The check is part of the paid assessment.

The watch

1 hbetween looks for new look-alike registrations

LeakTrace keeps reading after the assessment, so a change reaches you before a client or a bank tells you.

You receive: An alert by email when something changes, with the way in in plain words.
We never: Hold a key or a password to any of your systems.

Cadence

How often each area is read on monitoring

What	How often
Your email records	Every hour
New host names under your domain	Every hour
New look-alike registrations	Every hour
Flaws being exploited now, matched to your site	Within a day
Everything else, in full	Every day
What AI assistants answer about your firm	Every week

Compared

What each kind of security work covers

Each covers ground the others do not. LeakTrace is the side an attacker reads.

	An IT provider	A penetration test	Automated vulnerability testing	LeakTrace
Looks at	Your devices, accounts and backups, from inside	The systems in scope, on the agreed dates	Known software flaws on the addresses you list	What anyone can read of your firm externally, including names you did not know about
Access needed	Administrator access	An agreed scope, often credentials	A software agent or a list of addresses	None
Email forged in your name and look-alikes	Sometimes, when asked	Usually out of scope	Usually not	Read on every assessment and on monitoring
How often	Ongoing	Once or once a year	As scheduled	From every hour to every day on monitoring
What it covers that LeakTrace does not	Everything inside your systems	Breaking in to prove what a flaw allows	Checks run inside your network	LeakTrace never goes inside

Questions

Questions owners ask

Do you need access to our systems or email?

No. LeakTrace reads only what anyone can read of your firm externally. It never logs in, never installs anything and never touches your systems. A paid assessment adds service ports and keeps a redacted copy of any file that should not be public. It does so only after you authorise it in a signed assessment agreement.

We already have an IT company. Why would we need this?

Your IT provider looks after what is inside: devices, accounts and backups. LeakTrace reads the side an attacker reads: email sent in your name, look-alike domains and staff addresses in breach data. The two cover different ground.

Is this a penetration test?

No. A penetration test tries to get in, inside an agreed scope and dates. LeakTrace never tries to get in. It reads what is already visible, proves each finding with its record and re-checks until it is closed.

How do I know a finding is real?

Every finding carries the record behind it and a check anyone can re-run, your insurer included. Every paid assessment is human-verified before release. Its dated record can be confirmed at getleaktrace.com/verify/ with the document's fingerprint.

What happens when you find a look-alike of our name?

You see the name, its registrar, whether it can send email and when it was registered. With your permission, on monitoring or with the look-alike response, a person at LeakTrace sends the takedown request in your firm's name and follows it up. The registrar decides, so we can't promise it.

How fast would we hear about a change?

On monitoring, your email records are read every hour and a change reaches you within the hour. New look-alike registrations are looked for every hour. Everything else is re-read in full every day. Alerts arrive by email.

What do we actually receive?

Three documents (the technical evidence, an executive brief and a statutory mapping) and a dated record: every finding with its evidence and the exact fix, written for your own DNS host and mail provider, human-verified within 72 hours of confirmation. The first month of monitoring comes with the assessment.

Who else uses LeakTrace?

We do not share who our customers are or how many there are.

Proof